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Abstract 



PROBLEM TO BE SOLVED: To provide a security association cutting/continuing method, in which 
arithmetic processing can be reduced. 

SOLUTION: In this security association cutting/continuing method, when a user to use a terminal 1 1 
changes the terminal to be used to a terminal 12 during communication using a security association 
established with a communicating party host 3 by the terminal 1 1, the terminal 12 updates 'IP address of 
present terminal 1 described in the security association related information received from the terminal and 
according to updated related information, an enciphered security association continuation notice is 
transmitted to the communicating party host 3. Then, the communicating party host 3 executes prescribed 
deciphering processing on the received continuation notice and by updating 'IP address of communicating 
party' described in the security association related information held by that host, the established security 
association is continued. 
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3 tomzWiLLiZ-t:**. Uf 4 TV xx-xg 
wcaflW>fc. «*l 1 ttfWtii-f'jWWM** 
S*l 2fc3SeUfc*a. «5fU 2*\ 48*1 l*»«8 
ftK-o Jt-fe^f * U r -f TV vx- v 3 vN3HMBCEft 
Silfc r effl*<7)I PTKl^Xj «BKU JERftOW 
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y yx-y a y«j{Br/^S-&t fe v ^X , 

Mem 2 3Wt+c, frtem 1 *>«*£ttffl** 

x— f* 5 , Sl^li£«JB^§^£S&3<Dffi*££H 
U *<0». «flB*3«0Ji*fcWE»2««*i:»|BT' 

df a »J r 4 TV yx-y 3 y BUflMCflH Tflf^fcffi 
a^fifo^-bdfaUr-fryyx-^ 3 y^eBi*n^4. 

MESS 2 c948*# . 3@ LfcttffiUafctt LT ift^OfS 

wwtffw a y-r -<Tvyx- 

Ut-< TV yi- y 3 y *«igWS««X-f -y 7b . 
**tri i: 5r#Sifc-ri»-fe^ aVf-fTV yx-y 3 y 

iwmm 2 1 * >y h v-7 *aww* % 1 wsftam 

b tahW,2 coffi* t ^Efc-fc* a'Jf-fTV yx 
SJBvvCBWiiSfcfr a jlftyxrAco-feif a 'J r < 7 

y yx-y 3 vtm/Mfcnmza^x . 

1«2»2tf>S*fcSWS«fUc s «^l*>«**ttffl-*-* 

^-f* 5 . s^f!fcteffi-r*iB*£S3<DSii^te35e 

a y r < TV yx-y 3 y (CBBW iflMRCKKS ft*: 

*ay r-f 7v yx-y 3 yBttflwincft-jTiftflaa 

j£U ^K«iiJn$MEm20**CMLT5ifiTS 
^S^Xf-'yTi;. 

HEW 2««5fc&«.. SBLfcflJKa»fc*tb"CJJij£oa 

*E««:fTV\ mie^i<^si*tMEm2(7)« 
stEfc^iawiaiLfc-feafayf-^Ty^x-^Hy^ 
m-z>$mxf-y7t. 

^£tr£i£^fc*S-fe*ay-f -fTyyx-y 3 y 
[»*3i3] ^ -y h 7-^ 1 <Z)SS5fcWi 

®«#i:***20«8*i:^|BltHs'¥a 'Jf< TV yx 
-y 3 yS:i££U SM-fe^ayr-f Ty^x-y 3 y 



x~f#, SSBiSfc«»t6«***3<0«*fc3a 
U W>», Hiii2m3^ffi5t?tB!rlEm20^*ioraT 

i'Jf^v yx-y 3 yeBW-fiflHWiBaSftfc 

*a y r 4 7 v yi- y g vreEflmtzft o rw^flaa 
JUMHfc-fe* a y f tv yx-y 3 y$8ssi»££ 

*U SK«a»2rB?iem2oa*^LTiM<iL, 
«8EiB2tf5*B** t s gitilKWMMMzttlxmm 

y r < 7 y yx-y 3 v nmt & z b ZftWibtim 
imm ] *>y h 7-^ 1 os§*#s 

fiffi*k***20i8*fcOBlK-fe*ayf:-fTy5/X 

Mie^2c7)sg*tafi*t, fsem <«*£f£ffl-ti> 

i~f#, iKfflfilc«ffl-ri»«*&m3«*tc^M 
L. Btnem3cO«*t|?fE^2^*kcOHT 

iWEW3<oj|5fc&^ B5iemioffl**^sTOo^-fe^ 

a y r -f TV yi-y 3 yfcBW-tiflHUcBttSnJfe 

a y r 4 tv xx- x 3 y resfflfst^o t miw 

a*tf ofc-fedfa 'J r -f TV yx-y 3 y^BrMttS:* 

me£2tf)S*a>\ 5aiLfc«)BBB9i(c«LTJjf«<o(R 
^aa*ffv\ BiriBmi^a*J:frie^2osg 

[000 1] 

fftSWSHr^-a y t- -f tv yx-y 3 y±rsf^3i 

«*tf3*^tCfl|V>feii4-fedfaiJf--fTyyx-^a 

r -r TV yx-y 3 yi|±i*<oSi*«ui^«imil*-<r 
^a'JT-f Tyyx-y 3 y-ej|Bf/^*j£fcJ:t«Hi 
yxTAfc^-ts t>oT*6. 

[0002] 

[^*OS}S] JJIT, «3WS»t-3V^»?B1-i. RF 
C24 0 1 -RFC 2 4 1 2 (RFC : Request For Co 
laments) X'MfcLX^l I PSEC ( I P secur 

* L^«** s . ■fe+a'Jf<7V yx-y 3 >t mzti 
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mwmmm±.xmmm*'n ^*'jf<r 

>*M±-fh¥Wfi. IKE (Internet Key Exchang 
e) <9&ft#JfT'£>l>. IKE14. RFC24 0 8feJ: 

RF C 2 4 0 9 -eSSSft-CUS . 
[00 0 3] H914. fcfcitf. «FW2 0 0 0-3 3 2 
8 2 5 #a«fcwSfUtfl!*W:df a'Jf -f TV S'X- 

101a, 10 1b, 10 1 cfcW^*-yh7-^T* 
0. 10 6l«"/*7h7-;i0 1a, 10 1b, 1 
OlcfcfflSJgaLT^S-f ^-^-y r-T'&O. 10 
h«7-^ 1 0 1 atflPfetS5HUB*Tft 
0. 1 0 3J4fflftffl#*XhT'£9. 104(i^»«* 

1 0 2<mmmrYvxiiiwmmm s mth 

tztb<7)DNS (Domain Name System) if— AT&O . 1 

0 714-fe* a U r -f TV yx-i/ 9 y I 
PSEC r-y*/^**. 

cooo4] ±R s sz?j*nmmzo^xmi 

1 0 1 afr&ffitf)-*:/*? h7-? 1 0 1 b£»»W: 
«JIT?, 1 0 1 cfcfc*iHHH#*X 1- 

(HSey-K:CN) 103f:a»fi«*t:o^TK 

Bj-r^ . t*. ®m*mmm 1 o 2 tints*** 

M 0 3i:OH^jift«i. IPSECOhy*/^- 
F (Tunnel Mode) Srffiffl-f5 ( IPSEC^ilfcO 
Wt(4RFC24 0 1-RFC24 1 2#!S) . 

[0005] mum. 1 o 2 -swMffi^-o 

FV* I^*-A7Kl/^ (Home Addre 
ss: Haddr) fcDfJ:. *-ATFVXl4, 
1 0 2immth Vf* v h V-t 1 0 1 aCfc^TH 
9STS»*l*. ^»**10 2J4. ttfiljfc*>*-y 

-Til^T • Jt~f • TYVX (Care-of Address : C o 
A) fcBfci:. 

[ 0 0 0 6 ] ifc, 1 0 2-cii. h 

K I P SECj§g<&R. ft-5-3*lfc IP7KUX{Co 
A ) £ , I P S E C h >*)V<7)-® (*«£) Zm-?T 
YVX (y-h^xJTYUA) tlZ&m-ft. Ha 
ddrli. #r*;Wfc§*lfcl*|g&/^>y MCtJltS&fl 

[ 0 0 0 7 ] *jfc H ^IW* 1 0 2T'i4. msLiz%& 
fc. i!SllrtTflMB8fl*CoAtWf"f«. iOfc 
* . ^IW* 1 0 2TI4, D N S-ff-A 1 0 4 fcftfctc 

W»tfcCoAfcjBart«. 
[0008] — 3r, iiflffl**.x h l o 3T14, ±IEC 

fc^fc^^reiBtrt-cttffl^»»«*i o 20 
coA^jesfts. 



[ 0 0 0 9 ] afe. afiffl#*x b 1 0 3x14. 

*10 2«W*-*Rfc:. «ig*10 2<9CoA§rD 

M0 3t(l h KIPS E CJHlfcfeft* 
iW^^-y hfcil/W^'y r-<02WS<?5Tr-'l/X 
fc, HOtTKl^X (CN) Srffiffl-TS. 

[ 0 0 1 0 ] HI 014. ^IW* 1 0 2*>t ) mm&fr 

XM03MPSECh^H07lfflW!y-'V 
0 8(41 P SEC Y>*)VXbh. 

[ooii] &mm. i o 2?J4s h?-? i 

0 1 aX'^MM^tCoAt LTCoA ( 1 ) £S 
#-f& (RFC2002T'SS§ill»Co- 1 ocat 
edCare — of address "CtSff'f'S ) . £ 
£?14. WILfcC oA(l)l, I P>^ <y h SflsO 
S^-A^aMKET YUXti- .IPS 
ec h y*/uo-ig£^-t7 kux (y-h^i^H 

l*O0 fcU *-A71^W (Haddr ) Sr. I P->n° 

»^ >y K0J8ffl7C7 Hl/X(src)t"CoA 

(1) " tU «t7HW (dst) * "CN" 

U, PW^-y KO^'J^l^oaMUcr HPX ( s r 
c) * "Haddr" tt. «R«FS«I5ferH^ ( d 
st) * "CN" t-t&#T-fe/Mtn^-yh*%S£ft 
h. 

[0012] ortC. ^»S*1 0 2*^5»U iSftfi 
a2r*-fC oAA5"CoA(l) " "CoA 

(2) " t:3Efl:Lfc*^THl'^<ofl]"?#i.tov^T 

[0013] >i<d*&. i o 2-cia. c o a*>- 

"C o A ( 2 ) " fcSSfco Jtl%£T\ IPSEChy* 

Mmmnt-v vemmTtTYvxz -c o a < 2 ) - 
fcisets. -e«os*. hi ots-tiot. whp^ 

■y hOjiflTCTh'^^* 1 "C o A ( 2 ) " fSSEKOxk. 

[0014] 1 0 2<7)C o AtfaEfttttffiLfc 

»<iffl#*XM 0 3T'{4. I PSEC^-fedfi'Jx-f 
7Vyx--/3V (-fedfAUr^^raSffifg) ^r-^ 
SAD£#B§L. ZMtvisaye&Sitcy-h 
V^TYVX* "CoA ( 1 ) " jRfcfc "Co 
A (2) " tiS#Jii.6. aflWB#*^M 
0 3T14. y-h^x-fTKVXjyj'hcO-fedfA'J-f-rr 

ys/x-s/aJ'flHlfcSM.fcvwre. ^fcxff. ips 

[0015] ifc. 1 0 2TJ4. C o A*<«J0 

#*>o?t^jfiT. DNSt-A*l 04fc«LTSER^«y 
■t-iSZmtth. DNSt-Al 04TJ4, 
-f-Zt'F ( K^-f 7K1/X1/3-H (IPv6t 
J4AAAA) «) fcjDi. «^*-A7Hl^X 
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(Haddr) <Mz#><?ffi3k7 4 ~)V Y (Home Address 
Resource Record : HAAAA) tiz* TKW 

XV-n-Y ( I P v 6"Ci4AAAA) t(4. Haddr 

MLX\^t%) ttzlZCoA (WmtT^Zk 

[0016] 1 0 2 ttSKJireHHaC oAS: 

5I<iffi#*Xr-l 0 3TI4. rKVXPn- r-*ti£5l7 
: HAAAA^'MI,^;, WMm 1 0 

COO 1 7] DNSt-A'l 04£2tfl>HAA 
AAO^^^. HAAAAy^-Zl/WHW 
pa-F*)il«SB«i, m^i^nhixX^tz I PTF 
l^X^^C^-t^-^SWD N SS£r«UI (« : RF 
C 2 1 3 6 ) £83K LTS5fc:j£B-C§ S . 

[00 1 8] tfc. DNSIf-Al 0 4±<OHAAAA 
ffiffitt . fc t £14*. ilflffl#** M 0 3 tf&MB* 1 
0 2fc*tLT^-y r-£3MfiU =£»SS5ia 0 2#£*l 

#jfc*M 0 3T"«4. DNS1^A4(C»Urnv^b 
•fr£frV\ c o Aj&q»3iiTV**SiWl*l 0 2 (c*f 

- H £ AM LT r- y*A*X&iT Y Y *7 x A 

TYVX) ^CoAKU-t#al)f-(7y5/I-yg 

fttl>. 

[0019] ort, I P SEClcfeWSffiaflWBfc 
OViTl^aj-fl, ( I P SECCOpSSMwOVvniRF C 2 
40 1-RFC24 1 2#{!S) . 

[0020] I PSEC<9»UIf4. -fedf aijf^yi. 
X— v g y (Security Association) 

•fe^rall-f-f • 1**7 9 • 4 yrvtZ (Security P 
arameter Index : SP I ) t d s t ($&t7 YUX ) <9 

I). I P S E C fcHt 
*S. SPIli, -fe^fi'Jf -f TV^x-v- 3 >Sr^ 
*fcAfc«ffl«il6 3 2 b i XVMSfflM yf-/9XX 
$>9. AH (Authentication Header) , ESP (Encap 
sulating Security Payload) CO^-yfPit/ZseMZtl^ 

t** 'J f ^ 7 V yx-y 3 y«:ftffl§ti5 . -fe 
df a »J f" -f TV S'X-^ 3 yfc^$fts±*rt§ti s 

dst, SP1, Toha/W (ESP (tU<tiA 
H) , (tunne 1 ) ) , AHSfcJ4ES P"C 

ti& T)Vd y XA k a=Sr k* -C* « . 
[0021] IPSEC*ttffl-T45t«)fcUi, ffifflfr 



r DiffieHel 1 man j tmitl&W&Wfc** 

zmi&mmzkixmmzmi-z. ttz. ibeb 

Kfctt, X. 5O90>BE**EHfcRSA (Ron Rive 
st, Adi Shamir, Leonard Adleman) fflfttZ 4 

Ms*****? a k t«5e$<tT v >s . 

[0022] ^7h£j*fl^6i§^f4. *"f, -b^a 
y-f-f • sKUS"- • t—9<—X : SPD (Security P 
olicy Database) £8t*t.S. SPDJ4. 
^•/^src/dstf(^K. -fedfayr^ ■ 
XVis-ZMffitl. tJfa'Jf^ ^'Jy-lt On' 
fvYZWmtt (d i scard) j , Ot$r v hfc 
WiliSmibypass) j, riPSEC 
^JliHISrffa (app ly) j , cofiDS-^feSt^T 
stfcx.14. •bdfjLyr^ • *y>—# r app i 
yj dO«^fcJ4, titmi'Jf^yyX-yg 
V ( ft 4 V ^4-te* a y r -f TV yl- v 3 V tfiffifz-fK 

f^7yyx-yg^tHOT, £*Uce»$*ifc 

fro. frfc. ^iyf^Vyx-ygy^v^ 

14. mmm&rruYa/v: i KEzmmLx*** 
y 7- < r v j/x— 3 y coitiS: tf a . 

[00 2 3] -^T, I PSEC^'ffiffl$ilT^SA^.y 
MrS<rr-&i, *-f, 5^Lfe48*{4. dst (»« 
li%mitiS-Y) bSPlfrt>. ***V7-<TVi' 
x-ya^ftgL, E4S*lfcrtS*:ft-5tIPSE 

Y&btizsPDzmmi,. ***vt<< 'iKUi^-ft 
#4. -eu-c. •fe^-j.y-f'f ■ #y£^*6*frh.ft-fc 
* y r < 7 v s^x- 3 £ ^N-^r . y h z%m? 

Z>tzMzmmLXt<tz-t**.VTJ7V^->>3>k 
[0024] 01 1(4. W£*l 02t>£Vmm3- 

*xho 3*^$<TJt*-y Yv-tnmtem.** 

-t®X*i>l. ZZXte. YV-? 10 1 a(I# 

«^s^tts*i 02 (coa=coa (i ) ) tmm 

m*ZYl o 3 k3Wl*lTd«^t:ov^iKW-S. 

hi 2i±. z^ig&nwstti'-'yyxco-mzTjk-tmx 
[ o o 2 5 1 sr. ^»s*i o 2-ci4. ®mm?m 

7nh3;l/: IKESrffiffltTffl^lffi#*^M03k 
0>fedf aiJf^rVyX-yHV : SASrlfct-fl) (^ 
T-7 7*S 10 1). 

[002 6] HI 3«4. «g*l 0 2i54lXiiflffl# 
*XM0 3i!l { fr5-t^ayf'( ■#ijy--f-^ 
SPD^-#J£^-rHTJ)!>„ *Jt. 014t4. 
^IS^* 1 0 2 4 tfilftffi^** M 0 3 ^J^O-fedf. 
a 'J f ■( 7 y yX-y g y • f - : SADcT)— 
WiS^tBTC**. ^irfe. ftfflt* I PSECTnhn 
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[0027] Stt«$ 1 0 2 mm^X M03C 
HI 3 (a) «)SPDfc*BRU SPM (1) 

^ww*. spm (i) ctma'jf^yyx- 

y 3 V: SAfcLTSAM (1) (Mt Si 0 £128 
SnTV^cOTv HI 4 ( a ) <0S AM ( 1 ) £#Blt 
|>. SAM ( 1 ) fCli, Destinati onTKU 
Xfc LT "CN" #>\ protocol!: LT "E S 
P" modetU "tunnel" tftfttSflT 
US<7>-€\ Wi§*l 0 2HIKB^M 0 3^\ 

<r>ivrv hi i p SECT-#r-fe;WtU zwvrv Y 

CODe s t i nat i onTYUX* "CN" , SPI 

£ "c ( i ) " k izmmtz (xf'/rs 102). 

[0028] h*»tRofca»ffl#*^ r 

103X14. (dst, SP I ) = (CN, c ( 1 ) ) 
•CfcS-fe^A'Jr-f ryyx-y 3 y^. H14 (b) 

yT-rTV^x-xgyfcffilLTESPfc&IEU * 
7Mr;Wt£*hLTiIfiffl#*x r 1 0 3^^ht 

ss&th . afiffl#*x h i o 3&t>i&mm. 1 o 2^ 

WVri hfcJJakH«fcjMfllS*t* (x-r-xTS l 0 
3) 

[0029] SHWKa 0 2j3itf3MHI**.* h 1 0 
3 U *-5" b y\$ . iift^'-r^t "Haddr" 
k "CN" k<ora-Cff*«Hrv^i:B«H-4*«, HK(c 
*-y \-V—?*milZ>**v Mis "Co A ( 1 ) " 

"CN" tOO^^y rfc&S. 

[0030] iOlfltSTr. ^iffi* 1 0 2 «y h 
"CoA (2) " £E#U: 

(DDynamic DNS Update 
|«JWI*10 2fc»jet4AAAA7^-^Hfc:, MtE. 
CDCoAX'hZ "CoA (2) " *S»t& (^T77 
S104) . 

©SA Gateway Update 
dst74-/Wr-'# "CoA ( 1 ) " ■C&Vvfe^f.a.UT 
-fTV^X-^gy^^rSfc. dst=CN^|, 
^ " C N" KJfttT r SA GatewayUpd 
ate j Srffo (^T77S105) . -f-CD&IL Hi 
4 (b) <0-t^i'Jf-f7VyX-y 3 y. 
X : SADtf5rt*tt. HI 4 (d) 3 fcJBRSfl 
S. 

<3>SA Local Update 
8ftJB$l 0 2-Ctt, i#03SADfcf*SRU dst7 
4-/1/ r*# "Co A ( 1 ) " ?fc*t>tf>fc"9WC. 
T "CoA (2) " ^fc^jg-TS. 
[0031] &ttig$ 1 0 2 tfggffiMg l/0*tt¥ 
li. t^TO^aUf-lTy^X-yaywde s t 
i nat i o n7 KUX^SftcOC o AT£>S "CoA 



( 2 ) " K^-ffrf I P SEC h >*/K73 end 

pointli. "CoA(l)"H "CoA(2>" 

taw o»b* . "j . ^BS* i o 2 tmmiti 

SI 07) . *<0lSft, HI 4 (a) ^■fe^A'J-r-fr 
Vi/X-j/g y • f'-^<-X : SAD0>rt*tt» Hi 

4 (c) «Oi'3fc:3g*r3*l.&. 

[0032] zcox o mmi?\t. wm>ru h 
i PSEccohy^t-KSrfijffltt. a 

flffi#i:^fflffiS&£W«-r?». fSA Gat 

eway Up d a t e j fcV^Sfc&fciUirf £<ri 

vg>'S:fi>lE1"£. dynamic DNSu 

Pdate j fcffflf 4fcfci(C, Jfffcfc: THome 
Address Resource Record (H 
AAAA) j fcDNSfcSIW*. iittiO. 
5ftf)*-A TYVXkCoJKk cOKHSHnS <I i: tfT 

[0033] 

^O-fedf- aUf-f TV i/X-^ g yfflBf/«tK*tfeK 

HJ6l/0*SrV\ -T^i)^, x— Wlca-KfcX. 

5 0 9OBK»*^UiW>1Bfe»ilUfe*&tt, x- 

aVfcSHiU <-<0fc#, «Wrab3;P: IKE 
Vlt r D i f f i eHe 1 ImanlSj ^ <"RSAjl 

[0034] !RftC % ■7*y4yv Y^-X^fMZ^Vfh 

[0035] ±IB, flaWJ-fedfaU^-fTy^X 

[00363 iJEfcffi^T^i?n^ idOT* 

•8ms:*:* aUf^TV i^X-x 3 V^tyWth Zkifi 
[0037] 
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? m&th m i ?>m. ( rmth$mmi&<?>mi 1 
lfcffiS) #ilfiffl#t&l>m2o«* (ilflffl^tfx 

im2m*tmmwz. m&$im*zmmi-&3- 

3t6MfcttW*-6JI***30>** (**1 
2tfflS> fcSESU MS^30S*tB«l2m 
2O«*4:<0iarcjWi*fT5«^. «E«3<0*|*3&», 

Hinem i <o«5te&»&gitK-ofc-fe** y f^rv yx- 

-s'a VlGtflmfcttoTflHNHmfi^fc-b* a 'J 

fcifoOflWRj SrHSrrSifcfcioT, IffiSfcflrLfc-fc 
k. *-&ttZk*¥mt'9-l. 

[0038] -p#*<^Bflt*»*»s-fe^f a 'jf-( r y v-x 

-xa >-B3Bf/^«fc^t=$>oT{i. *v h!7-?£lf 
*W* « 1 OKHtjW«iffl# i: =Sr4* 2 <?)3§* OHt 

-b^a'Jx-f ryvx-v-gysniit, ss-fe^fai; 

•f -i TV S/x-i ^ a y Srffl ^TQHHHIt trS jMi'.x 

rAtfc^T. fr^H2<osg*tiifi*{c, mama 
comit<7ffi?wmzm%>iir. me* 3 m 

JfcoUfBj fcJHRU IBffl&fl-fe* * D 7M T V >-x- 
4 7V i^x-v a yOTriI»£±l£U SM«»riI»£ 

frtem 2 L-cayrr im^f -y rt „ 
mm2<7)Wkti s . ^mv^mmssaizntxm^m 
mm&frK *<r>&. m&micomikmm2com 

Jfck<?>fEllzm$.Lfz-b*jL Uf-f TV vx— > a y£HjJ 

[00393 ^ZnW&zfrfrhmmi'Z'rMZb-oX 

h%2<n^%k<rm\Z^ y-f-f TV i/i-ya y£ 
5t4L, aK-MfAyfwTVS'X-i/ayfcfflVvCli 

-§«fi£fr5«j£i:U fefciar. itften2^**ta 



3<mfakm&2<r>m.k<rffixmmft 3 >%&. «r 

'J f 4 TV ->x-x a > fcB^*fl!*ciE»§*ifc 

'Jf^ TV i^x-^g yWJlffl^tc^TBft^ 
SSrff ofc-te* a y r < TV yi-y a >4fcg6iftl&& 

«oflHBj *!SWiii:tJ:oT. MaftLfc-b**. 
UT^TVv'X-i/3y*|tHrt-5ii:*l«Si:r&. 

[0040] o?<o»BBfc*>*»ia«^^fc*>-3-c 

tt, * -y h 7-? fc«MW-6* 1 tf*fc#SIfHfl^fc % 
h%2 <m*k nmz-t* a y r TV S'X- v 3 ^ 
W4U 3SH=^aUT-fTV^x-^3y*fflv^»l 

■9»«£fT3«M&fcU tzkHi, mm2<mmtm 
ft+t. «fiEiei^a**ttffl-f *x-iw. iisafi 
izimtimmn30^nissmu mom 

3<Vi%*kmm2(0il^kc7)®X'WmZ'<T0Wiii. m 
E»30«5te&«. 1MEIIIl<^i*36»4.»tW-jfe-b#a 

y r -f rv ^x-y 3 >tMii-ti.ffi#tcfe«§ii7t: 

^i'Jf-f TV yx- j/ 3 y Mjiffl T Bf^-fbffi 

a*ff->fc-fe#f * y r -f TVyx-xg >"WBfffl»*^ 

•f55s$rffv\ B«rie^i^«*kHfifem2cos 
*t oiatiii Lfc-fe# a y =ta ryyx-y 3 y 

[004 1] 

a. zffmmcrmmzj: ^zmmm^iih 

[0042] Htfe^S 1 • lilt 
^a'Jt^ 7yyx-y g vflJBr/lttBSF&^lgSf * 

a. lb, 1 cti^y^ybV-^T'S. 1 ?. 6tt-9-7* 
•yhV-^la, lb, lc*ffl2«IW*-f^-* 
3(iiHiffi#*Xh (CN)Tft'Js 11 
{i-^y^-y h«7-7 1 a£#ft^6ffi*T& 9. 1 2(i 

^*«yh!7-^lb(C#«-4«5trC»*). 13(ix 
-if FTfo 0 , 1 4ttx— 9» FWfgilSk S PD (Secu 
rity Policy Database) kSAD (Security-Associati 
on Database) flW8£|g|frf£ I C*-K-C*0 . 1 7 
tta<SB**^h3i:J|*l lra-C-tr^fAyr-fTy^ 
x-^ 3 yi;tTifci$iT/v:iPSECh >^>VX'h 
0. 18(±jMfiffl^*Xh3kS*l 2IBT-fe^A'J7 s ' 
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4 7 V isx-is 3 y b LT5l±$*ut I P S E C h 

[ o o 4 3 1 c: i ±fe* n 7-^ izmimmo 
mm i >j r <r rv >-x-^ 3 >®m/mffim 
iz-o^xmw-ri. i-r-ra, x— tf# s -r/*-/b 

7-? 1 afcJR1-^»ffi*l 1 £fflWtaflffi#** r- 3 
fcjffllfcfrK *<3«, ^»5feO-!f^<y b7-? 1 b 
fcS-TSffi* 1 2 2-JBWt»f!ffl#** h 3 tMfi £ff 

[0044] ^illii^«*l Itiimffl^Xh 

zh3t comnmmziz, i p s e c <n v - y 

(Tunnel Mode) i:ffi%?& ( IPS E CCDpiIfcOV> 
TJ4RFC240 1-RFC24 1 2#B8) . &tz. ffi 
*1 1(4. CoA (1 ) Offljgl PTKW^*., « 
*1 2(4. CoA (2) cofflgl P7r-*1^£8M?, il 
{Iffi^*Xr-3(4, CNOEJgl P7FUX£gf^. 4 
fc, *■* 1 1 fc«* 1 2 fc»ffi«4Ms* r- 3(4, h 

F I P SE CiKKcStf* »\77 r-fcj: tfrt 

y ho 28^07 h vxat, n 1 1 pt y 

MBS**. 

[0 04 5] 02(4. I PSEC$rfflV^*S60aWi 

*T(4, -fe** U r-f • #U • r-^-X : S P 
DfclteW*. SPD(4, *WKfc#5^-y r-C9s f c 
(sourceTHWlfc^dst (Destin 
at ionTHW) W*yf< • * 

y 5"-H»i** . te* a y r -f ■ tf'J v-tt. r a'^- 
•y^«atS(discard)j, W. y }.£.£ 
^^»S?«(bypass) j, UpsEC?) 
imZm (apply) j , tfDff»*5e»4 
*. fefcitf. -bdrAy-f-f -/-Kyv-** Tapp 1 
yj WHattt. ^tS-k^ayr-f TVvX-i/g 
v ( ft 5 v ^4*3- * y r -f 7 V ->x- 3 y^t^ 

[0046] ^yf-try-zi-ya^ 

V*&&{4, afflfc«Stro h- : IKE LT 

-b^ayf-^ry^x-^HytfOffii^ffo. &£3rr 

nbn;k IKE V\i, & "9 « LBf±W£»(c«BB 

x. 5 o svim&zmwzTVfjvm&ki. offlsis 
e**t3*3Jl sasLTv^*. f^)vm^x'\t. m 

[0 04 7] IPSECtf&fflSftTV^A^.y h£S 



P I (Security Parameter Index) -fe^f aDf 

psEC<o«%ifo«Hitff3. *l/c, flWirtyt 

S-fedf a y r >f TV yi-i/3 y*\ IW}' «y h 
JW S^ftfcffiffl tT Sfe-fe^f a y T ^ TV yZ-5/ a 

[0 048] 03(4, JL— fF^ffl*l 136»4>«*1 2 

I.. **J, 1 P SECTo r-rj;K4E SP (En 

capsulating Security Payload) §ri®S'f"l>. 4"^, 

*i i-cj4. ®mm<m7uh3ii: iKEtmt 

xmm^x Y 3 b O-fc^fa y r -f rv ^x-~> g 

y : SA*«fct4 (03, 77SU (1)# 

js) . -fe^jLyr^ry^x-^gy : sAzmttz 

izfixomm*. flKil l*>'i-^'FcoiD (PWW4 
X. 5 0 9C0J.-- (f Fc9l2iE#<D subject^lt 
S>0, lflffi^*Xb3^'a^IP7HUX: CN* 

wmmttz h 3 com&o i d t* s . 

[ 0 0 4 9 ] 1 1 T'{4, Sfiffl^X h 3 tcit LT 
TCP (Transmission Control Protocol) /UDP (U 
ser Datagram Protocol ) <7)p o r t#-^8 >y 

b^frri.^ spD^esg-r^. 04 a— r 

FiOIC^-K^SPD. a— fGc7)IC*-Ft^co 
SPD. ii{tffl#*^b3rtiOSPD. 2r^-rHTJ) 
"3. 04 (a) (4. -fe^iUf^rVyX-yH 
y : S AZfflLf&mz I C^- H 1 4rt«C|S^§^T 
v^JL-ifFco-fe^fayr^ • ;Ky is— • 
X : S P D<7)-WZvk-tmX'&h . 04 ( a ) OftBRfe 

aicio. di-c(4. spf (1 ) taaR-r*. 

[0050]SPF(1) fcti-fe^yr^ TVyX- 

^ayktTSAF (1) z%m~tmt,ztmzixx 

V^SOT. S*l 05 (a) ^SAF ( 1 ) * 

Wfkth. 05J4. x— •TFKH't&SADSwtHT 
ft 1 ), m:* 05 (a) (4, Hayf^rVyX-y 
aV: SA*W±L^afc4«SiliJ|*l lO-fedfa 
'Jf^VyX-yay •t-?^-* : SADCD— 0y 

[005 1 3 SAF ( 1 ) Destinatio 
nTh'l/X^LT "CN" 35*, protocoltLT 
"ESP" fr\ modeiLT " t u n n e 1" fr\ * 

X h 3^Wf ^ yMrlPSEC T'^T-fe/WtlL. 
A^./Wsourc e7 h'WXSr "CoA ( 1 ) " b 
U Destinati onTFUXj "CN" i: U 
SPISr "h (2) " fcU ESPti*ife*ft4LT 
3Mfi-rS (03, Xf7rS2. (2) #9g) . ^7"-fe 
;Hfc<0j!Pit'(4. KEYH (2) ?rfflV>T« 

C0A'ir.yh?:Bft<tt&. 
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[00 5 2] i«^yh*38fltLfcaflM**Xh3 
■Cli. (dst, SPI) = (CN, h (2) ) X'tbh 
■fedfaliT-f rV^X-i^g H6 (a)fc^tS 
AD^feKBHti. 06 (4. «f!ffi¥*X h 3 ICR?* 
SADt*tSrC*9. Wfc, 06 (a) 14. 

Mftffi^** b 3 cO-fc^f j. U T -f TV i'X-v' 3 y-f 
: SAD<O-0iJ$r*?0"e&&. 
ilftffl^** h 3 fffeftft-t* a l) tm TV 

^hUTS*l li»i!>W^yb*ft6. t/7-t)\<tt,Zft 
•WSaTIi, Bf^H: KEYH (2) £JBUTF*|I!|<0^ 

[00 5 3] *LT, S»iffi¥#Xh3i3j:tflKei 1 
Tli, «fHB¥**b 3 1 l^^'vhfco 

WCiJJEfcBK^JircJffil?* (13, Xfvrs 
3. (3) IKS) . 

[0 0 54] HUcfcV^T, a— <fFi«B*l 

1 *><oig3fc 1 2*4H»U SB* 1 2 k jlflffl#** h 3 
k«ra-««i*ff3«^fc:ov^»^Wi. £?> a- 
IfFJi, 05 (a) (c*3il-CV^SAD*IC*-H 
14^at-L s Sttftfc:. lC*-K14<0rt«S:S 
*1 2's»*5itf. «*1 2T'(4. 05 (a) OSffffi 
SAF (2) COD i st i nat i o n 7 H VXtffgM 
\2(n>nMTYVXtWihtz^>. Co A (1) £Sg3fc 
1 201 PTh'VX-CJbSCoA (2) M3€?l>. * 
05 (al^A'Jf^yi/X-yay- 
T-^^-X : SADfDrtSti, 05 ( b ) ■? Kg 

[00 5 5] Sfefc, SS*1 2Ttt. x~fF£R|?S 
•fedfjL'Jf -fTVS'X-xg V . : SAD 

»fiffi¥#*h3'^ilj9l?6 (03, Xf-y7S4, 
(4) 4MB) . ii-CJi, SourceTKW?; "C 
oA(2)" kU destinati onTYVX* 
"CN" kU SPI£ "h (2) " kU ESPfc-I 
fife *#*?*. *LT, Wsour c 

eTHWJ "CoA(2)"kL. destinat 
ionTHWt "CN" kU port#^£ "10 
0 0 0" kU T--*«fcSA£««?S3-Kfc:x.- 
-fFOl2aE»<9sub j ec t*$R£U Bffft : K 
EYH ( 2 ) fcJBWCItfUfcSL I P SECWt* 

[0056] S A<3liHSl»*Wt UfciMffi*** h 
3TJ4. (dst, SPI ) = (CN, h (2) ) T* 
^a'Jf-fTVi'X-yg^ H6 (a) <0SA 
D*»fe«Sft4. SAD^SAH ( 2 ) OK 

EYH (2) fcJBWOWU SAOtt8BK9K0*7"-b 
ML£ Ji?# , l*J» I P'<* -x h . iiifc J: 0 . a 
-1fFtf1£ii)U «**S3gU:*£T*oT«K SA 



[0057] h 3T14, x— <f F<9S A£ 

fflfcthtzibliZ. 04 (c) *>SPD£*«U a— *f 
FteR«?*?*T<Ofll#£*lilt*. UtttiLfcSPD 
«4*»Ta— f FKRIf 3>t>OJ4SPH ( 1 ) kSPH 

( 2 ) ?**fc*>s jiftffl¥*x h 3Ti4. ra^-rs S 

AH (1) k S AH (2) <n SAD *M^S. .l-IT' 
(4, SAH (l)Odestinati on7KW^ 
Co A ( 1 ) fcRSSfU «*1 2*>HJgI PTYVX 
fcHfiro-O^fcfc. jlfiffl¥*Xh3Ti4, J8*12 
cOS^IPTH^^CoA (2) lizmzmt* 06 

(a) £jj*?SAD£06 (b) <7)£ o fcJE$t?4. 
[00 58] *tf>8HL a—TFifififfiffilfltLT^iffl 

?&fc^s jlflffl¥**h3{4, t^Wr^a'J 
T^VyX-ys^fOde st i nat i onTHl^ 
Xtf "CoA (2) " fcSMtfSfcifr, IPSEChy 
*;Wendpointlt "CoA(l)"H "C 
oA (2) " KflJOSfc*. ifiWJ. x-f-'F*^ 

Vs/X-^aSoWBSfiSESflS (03, XT77-S5 

fc4tfS6. (5) . (6)#Hg) . 
[0059] ort, x~?G#**l 1 *>£>j!fSffl# 

*xh3fc»U"rr^-fe^T6*&fc*5v^»W4. 

=5r*k jl— «fGjM0rffl/O^ I Cj&-FrtfcJ4, 04 

(b) fc*?SPD#&fS$iVCU6. ifc, 0*14 L 
•CWflrVvF. 48*1 li4, 3M»:«Ri7'oh3^: I 

k e zmm Lxmim^x V3t co*^* vt< tv 

-y 9 V : SAS-Slir-t^^OilS'JTO. ^§*1 lffl 
tfGcOID (PWW4X. 5 0 9Oi-ifGOlS 
SE»Osub j ecU) "C'J> 0 , MimttXh3W 
miPTYUX: C N* fcliaUgffi*** h 3tOfgiE 
SOIDTS)!.. 

[0 06 0] 117(4. a— ifGtBW*SAD*«tH 

A£W4»fc£j£3it*«*l lW-fedfaUf--f 7Vy 
x-^ 3 y • t-?<-X : SAD<7)-^JSr*t0"C'* 
S. *tJ. ffiffl-TS I PSECTOb3;W4ESP^S 

[ 0 0 6 1 ] J8*l 1 fimmttX h 3 t»LTTC 
P/UDP«p o r t#f 2 3^^7 b^iitSii 
**1 1TI4, 04 (b) KwtSPD^UBRt. 
SPG ( 1 ) SrS^-TS. SPG ( 1 ) W4, Hr^aU 
f -(7yyX-yg yk L-TSAG ( 1 ) Zgmt&Z 
5fcSj3frS*VCV>40T\ 07OSAG ( 1 ) £$mt 
h. SAG ( 1 ) fcHU dest i nat i onTKV 
XkLT "CN" ^ protocoliLt "ES 
P" modetU "tunnel" *^g?itT 
^&cr>X\ JB*1 1T'(4. afSffi^Xb3^W^'y 
h^I PSECT'#7°-fe/WkU W^7^sou 
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rceTh'^Sr "Co A (1) " fc U dest in 
a t i o nTVUXi "CN" b U S P I £ "h 
(4) " fcU ESPlZZtlL>Ztt J ?LXimt&. il 

r^Mt<mmx'M. m^fii: keyh (4) *m^x 

[ 0 0 6 2 ] £<r>^ - y h UdiSflffi#*X r- 3 
-fli:. (dst, SP I ) = (CN, h (2) ) X'foh 
■b^yf-fTVyX-yayJ, 06 (a)**Wi 
06 (b) OJ;3&SADa^®Sirf&. -?-tT. 3^ 
ffl^*Xr-3-Cli, f^tifc-fe^yr^rVvx-^ 
gyS^LTESPfr&lEU ^7*-b/Mk£*l-LTf? 

ii«*2*^w^-y h tr-tMtZft-fwm 

T\i. »fi:KEYH (4) fcEvvCftllcTy-^-y r- 

[0 0 6 3] ZCOZolZ, S*l lfcSffffl#*Xr-3 
^<7)I PSECjlttT-Ji. x-1r*F, i— fGb^iZ, 
mmzmfcZtlX^Z, I PTKl^fcfi$iuiLT»fI£ 

c o o 64 ] ull, ^mmmmiza^xit. m.m 
Yv-^mm^znix. 3--i*tfm-t2>i% 

tt38ZltzW&lz^Xi>nmi-Z>ZttLt:. -f% 
hh. IC^-h*t#ijmoffi*OX. 5 0 9<Of2iES 

>m*%<i. mm.izmmnyvha;i: ike 

fc^S r DiffieHel ImanSIj *?fRSA 

SIS j o^^SfJ^ISJaa^fffc^rV^t Lfc. £ 
titiO. x-if>3ifIK<£fflTri>S*£^L£*£ 

[0 0 6 5] 03 (4) c7)SAJ8iBBia-C-{i. p 
ort##iLT1 0 000£ffifflLT^I>#. 100 

[0 0 66J *HifecO^«T1i, Bff^iSrfflv^ 
I P^r-b:;W^-0lJ5r^t^*^ IPSEC^ifgt 

I P#T-fe;Wfc£ffo*:*§3-T'J>oT 
ll«0$m£*#l>£ J: 

i o o 6 7 1 4 . *mmmmxii. spd £fE»-r 

«*fc £ ktA'SAD^fSii-ri»mtLT, IC#-F 
ZM^&ZbbLtitf. Ztilzm^-f. 7n.yt^f'( 
x^ftr -f ^^^rt'^'JolEiimSrfflv^c: b b I 
TtctV\ -TKX<0 S PDt SAD 
mzM lxm%Aj)-f& ZbbLXi>H\ 

[00683 &tz. i&m<r>Bmx\±. &wm<r>im\ 
i bmm^x v 3 b^mcowm. axw&mm® 
*i 2bmimttz.h3bnmcommi,z. ipsec 
n h y *;he- f s-ffiffl itztK ztuzm^-f . i p s 

ECiOF^^X.-K-h^-K (Transport Mode) Srfgffl 



[ 0 0 6 9 ] *Hllfe^®T1i. ilflfl*** F 

4>-f, ^-^❖ifco+^it^i PSECo*r-b;Ht; 

[0070] H*fec7)J^®2 . HJ«^»«20-fe 

w*. m^nmmmixit. x~ «rF«wwcffo 

JL—fFfcRti-fe^aU-f-fTV^X-J/ay: SA 
fcttgW-SiSfcU:. ^feo»^2(cfcv^T(i. x- 

1 3^*^S<^-5^-bdfjL'Jr^Tyv'X-v'gy : S 

[007 1 ] H8lis HMO^ffi2£7)-fe^Ayx^7y 
xX-^ g >fl]Uf/'^^1£^^-HTJ> , 5. SMC 
Ji, affiffl*#*h3fctt*l 1 fcOlS|;fc«]:tfiI{HB# 
*Xh3tS*l 2k<oiat:J3V>T, t^'Jf^rv 

[00 72] ZZX\ mifc<0&m2<D±*z.V7-J7V 

^-^s>vm/mmmiz^xm*z>. 

08 ( 1 ) , (2) . (3) oJBatov^Ttt. fr»o 

mmmBibF\mx'$>&. 
[0073] x—fF^ <mtz>m.*m.i 
a* 1 2Mse-ta%£\ ic^-fi4 jc3E»s*ut 

05 (a) fcSrfSAD*, «*1 2MI*&tt. ffi* 
12Ttt. 05 (a) OSftfflSAF (2) <7)di st 
inati onTh*^^'3g*l 2<T>UMTYVXbm 
Z&tztb. Co A ( 1 ) £S5fcl 2<9I PTHVX-C* 
5CoA (2) 'sSgCt*. d^<tO. 05 (a) O 
^aUf^ • 7VyX-y 3 > • t-^<-X : SA 
DCDPW1405 (b) Oi'jfcieKSn*. 
[0 0 74] S*l 2Tt4. aftffl#*Xb3 

{c^L-T. x-1fFfcBW6-fe4f aUt-t ■ TVv-x- 

Vyx-y 3 y : s a HOSf*-* (08, 
Xf77S 11. ( 4 ) #B1) . iiT'(4, s o u r c 
e7h'l/Xj "CoA2" b L. dest i nat i o 
nTKVXS: "CN" t. SP I £ "h ( 2 ) " b I 
X. ESPfc£*l&£ff-M-4. *UT. rtffl!l<7)/N*y-y 
h<5Ds ou r c eTb'l^Sr "CoA (2) " tL, d 
e s t i nat i onTHUXlr "CN" bb. por 
t##^ "10 000" kL. r-^aW£SA*«JBW 

h a- v b x-if Fommmn subjec t 

: KEYH ( 2 ) SrfflWCBfrtftU I P S 

[00753 s Afljsf aa*«e Lfcjwaffl**^ h 3 

Tli, (dst, SP I ) = (CN, h (2) ) X'hh 



(fcO) )03- 
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•fe^jLUT-frVvX-i/a^Sr, H6 (a) (OS AD 

frbmmtz. zix. pmwvh*. sad^s 

AH (2) (OKEYH (2) fcfflWflWU S&fc. 
SAHtBffljawi PSECt£j:i*r*;Mfc*l»*. 

\t. a-irF<3SA*18BW*«y!fcff3. 
[00 7 6] iiftffl¥*Xh3T1i. JL-HfFWSA* 
flJBrf 04 (c) *)SPD£«BRU i— 9 s 

f twi-r <r>>m*mrt- a . hub tfc s p d 

fx— fFkWSflHBiSPH (1) kSPH(2) 
TfcSWC. fiB*UTV^iSI6«)SAH (1) kSAH 
(2) *?USU t^i'jf^7yyl-i'3>: SA 
*BR»rt-* . jlfSte**X h 3 k 1 2 k « 

BBC «fc***ay^'fTy^x-^B>'felBBW 

s. 

[0077] £*> «k a c. *nsfe^jBtfcv%r{±. a 
iSWSik^-c^s. 

[0 0 7 8] 128 (4) OSAflJDfjiaTlis P 
ortSftU "1 0000" ^tfflLTVM.* 5 , 1 

0 0 0 0 mfeX'h < . ffitfD*t"Ci 

[ 0 0 7 9 ] #HJfe?W$gri4. B&#^S:ffiV^ 

1 Pj&r-feWfcO-WfcjjsLfc**. ifttRfc-f , I P 
SEC & J: ? fcitft* a •/ ^ aHRfcJB vvfc 
r-^BK^-^ffilBJciS I P^T-fe^Hb^lfoJt 

[ 0 0 8 0 3 ^^OtWJKBTJl. S P D ££»t 
S«*fcJ:tfSAD*f2**48*fcl/C* IC;jr-F 

^^atr-f ^^=Srk*OSiJ^iE^*&fflv^«Ik fc L 
•Ct>«J:V\ -t^TOSPDkSADSr^lft^oas 
*fc*f LTuWa**-* - k k LT t) J; v >. 
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